An Efficient and Highly Available Spatial Memory Error Detection Method

Abstract

The invention provides a space memory error detection method with high efficiency and high availability. The method comprises the following steps: carrying out static taint analysis on a program, and carrying out taint marking on a pointer which may be controlled by an attacker; building a shadow memory space before the program runs; storing boundary information of the taint marked pointer; creating the boundary information for the taint marked pointer in the program, and transmitting the information to other related pointers; and finally carrying out pointer boundary detection on an instruction for writing the memory by using the taint marked pointer in the program, inserting a code of tolerating the error into the program, so that the program can tolerate the space memory error to ensure the availability of the program. By adopting the method, performance overhead when the converted program runs is reduced, and the space memory error can be effectively detected. In addition, the availability of the program is improved by adopting an error-tolerating method, and the program is prevented from being attacked by denial of service.

Description

technical field [0001] The invention belongs to the technical field of computer software memory security, and in particular relates to a space memory error detection method. Background technique [0002] Program memory errors are generally divided into two categories: spatial memory errors and temporal memory errors. Spatial memory errors include array out-of-bounds errors (eg, buffer overflow), uninitialized pointer dereferences, invalid type conversion errors, format string errors, and more. Temporal memory errors include dangling pointer dereferences, double frees, invalid frees, and more. Memory errors mostly exist in the C / C++ language, because according to the C / C++ language standard, an array out of bounds, a null pointer dereference, and reading an uninitialized variable will cause undefined behavior. An attacker can control the program's execution by exploiting the program's memory errors. Among the top 25 most dangerous software errors released by CWE / SANS, memo...

AI Technical Summary

Problems solved by technology

[0005] Aiming at the problems of high performance overhead, low compatibility, and low usability existing in the current space memory error detection method based on pointer boundaries, the purpose of the present invention is to provide a space memory error detection with low performance overhead, high compatibility, and high availability method to better and more efficiently detect memory errors that occur during the running of a program in real time, and ensure that the program can continue to run normally when a memory error occurs, preventing attackers from carrying out denial of service attacks

Images